vCenter

All,

Looking to figure out what is missing (maybe my understanding) to enable vCenter users to update their domain passwords. 

Backstory:

We have a basic lab where around 100 users create and manage their own VMs securely. The last part of the puzzle is account management. The lab has its own AD deployed, where all user accounts are provisioned. Currently, we have to manage those passwords for them and it a terrible solution. We have tried to get the Change Password function within vCenter 7 to update their AD accounts, but have been unsuccessful so far.

Has anyone gotten this to work? Does it even have the capability to work? 

VC doesn't manage AD accounts . Once u configure Identity source for VC; it just allows AD users to access VC as per the permissions set at VC level. 

U change AD user passwords; AD guy needs to manage it.  May be you can create a local vsphere.local account for users  with passwords the first time and they can change it later if needed.